<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<p style="color: #777777;">
<a href="https://gitlab.com/nmav">Nikos Mavrogiannopoulos</a>
commented:
</p>
<div style="">
<p dir="auto">The error will be detected when the public key is to be used. For example if you try to print that certificate you'll get:</p>
<pre class="code highlight js-syntax-highlight plaintext" lang="plaintext" v-pre="true"><code><span id="LC1" class="line" lang="plaintext">error importing public key: ASN1 parser: Error in TAG.</span></code></pre>
<p dir="auto">Similarly if you try to use it in a TLS handshake the handshake will fail when it tries to use it.</p>
<p dir="auto">So accepted is not really the case. The fact that other implementations reject it earlier may have more to do with the internal parsers of X.509 rather than an intentional action. Is there some particular attack or potential flaw that you are trying to address from?</p>
<p dir="auto">Nevertheless, if there is a particular attack or threat we can defend from would you like to suggest an MR? We could check whether there is an error when reading the public key algorithm (that will check the pubkey form too), at <code>_gnutls_check_cert_sanity</code>.</p>
</div>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/issues/873#note_260370109">view it on GitLab</a>.
<br>
You're receiving this email because of your account on gitlab.com.
If you'd like to receive fewer emails, you can
<a href="https://gitlab.com/sent_notifications/cea6befc655333a01771b19692c6f3ad/unsubscribe">unsubscribe</a>
from this thread or
adjust your notification settings.
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/issues/873#note_260370109"}}</script>
</p>
</div>
</body>
</html>